Validates the X-Admin-Token header. The admin frontend calls this once at login: 200 => token good, 401/403 => rejected. Cheapest possible authed call (no DB access).

The collection's membership rule, read-only: the label_alias rows whose collection_id points at it (a raw scraper tag normalizing to one of these is what attaches an event at import time), plus the legacy query-shim aliases. Powers the admin "why is an event in this collection" panel.

Daily event counts for one collection (Info-tab chart).

One conversation's full transcript (every ask_message row, oldest first) plus the conversation's rollup header. The transcript view in the AI Chat page renders this; raw llm_json is included for inspection.

Daily per-scrapper event counts across ALL scrappers in a single call, powering the Dashboard overview chart. Unlike GetScrapperTimeseries (one scrapper, zero-filled), this returns every scrapper's sparse non-zero days so the client can pivot/stack/filter without N round-trips.

Embeddings overview: vector coverage of in-scope events + Voyage token usage/cost rollups (30d + all-time) for the Embeddings page header cards.

Per-UTC-day embedded-event / token / cost counts over a window, for the Embeddings page chart. Zero-filled like GetScrapperTimeseries.

Daily event counts for one scrapper over a window, for the Info-tab chart.

Per-user AI spend + sent-message counts bucketed by day or month (NY tz), powering the Users detail chart.

A user's long-lived agent memories (the db_memories rows — the taste profile injected into the Ask system prompt). Shown in the AI Chat page's right rail. Empty when the refresh cron hasn't summarized this user yet.

Daily Ask-message counts per user across ALL users in one call, powering the Dashboard "AI messages per user" chart. Mirrors GetDashboardTimeseries (sparse non-zero days; the client zero-fills a continuous axis) but the series dimension is the user, not the scrapper. Only user-authored messages (role='user') are counted, bucketed by created_at on UTC days.

Searchable, paginated list of a collection's events.

Collections (curated taxonomy in the `collection` table). Same Info shape as scrappers: list + daily timeseries + searchable events.

Recent embedding_run rows (inline-import + backfill batches), newest first, for the Embeddings page activity feed.

Searchable, paginated list of user-submitted reports (the app's block/report flow) for the Reports triage page. Each row carries both the reporter and the reported user. Open (unresolved) reports only unless include_resolved.

Searchable, paginated list of a scrapper's events for the Info-tab list + preview (HTML card / JSON viewer).

Per-scrapper rollup powering the left scrapper list: one row per distinct source_parser found in imported_event.

A user's "Ask" AI conversations (ask_conversation rows bound to user_id), newest-active first, with per-conversation rollups (turn count, sent count, billed spend). Powers the AI Chat page's per-user chat list.

Searchable, paginated list of users with per-user activity rollups (saved/wishlist counts, Ask messages sent, total AI spend) for the Users page list + collapsible detail.

Flip a report's resolved flag (triage state toggle).

Toggle a collection's active flag (inactive = hidden from the app, kept in the DB). Returns the updated stat row.

Set a collection's [starts_at, ends_at] window (0 ms = clear that bound, i.e. evergreen on that side). Returns the updated stat row.

Edit a collection's display name, description, and image (looked up by slug, which is immutable). Returns the updated stat row.

Upload raw image bytes to Cloudflare Images (same account as the events pipeline) and return the optimized imagedelivery.net URL. Generic — used by the collection image picker, reusable elsewhere.

Admin: list recent events_importer Cloud Run invocations. Requires the X-Admin-Password header to match NOFO_ADMIN_PASSWORD.

Admin: list recent scraper Cloud Run invocations. Requires the X-Admin-Password header to match NOFO_ADMIN_PASSWORD.

Ping

Wishlist

Get one event

List all events

Facets + collections vocabulary (controlled taxonomy tree + curated collections). One call returns the whole tree the client renders chips from. See plans/tags-refactor.md.

Personalized "For You" recommendations for the authenticated user (bearer-gated). Taste comes from the model-written preference memory (refreshed by the memories cron), falling back to a summary of the user's saved events; retrieval is the shared semantic pipeline. Events the user already saved are excluded.

Tags

ListWishList

RemoveFromWishList

Search — the app's Search tab. Combines exact/fuzzy title matching with the semantic (vibe) pipeline behind /v1/events/search. Title matches are ALWAYS ranked above semantic matches (the two response lists encode that); semantic results are deduped against the title list. When the semantic pipeline is unavailable the RPC degrades to title-only instead of failing.

Accept a pending incoming request → forms the friendship.

Block a user: tears down any friendship/pending requests between you and them, hides you from each other everywhere, and bars new friend requests in either direction until you unblock. Idempotent.

Decline (delete) a pending incoming request.

Your friends who are GOING to a given event (the event-screen avatars).

Your rotatable share code (minted on first call). Share it as a link; when someone redeems it you get a friend request.

A user's profile. Friends/self get the full view (their upcoming GOING events); everyone else gets the limited preview.

The users you've blocked, for the "blocked accounts" management screen.

Your friends.

Your friend feed: (friend, event) pairs for friends GOING to events in a time window — "who's coming to what".

Pending requests addressed to you (people who want to be your friend).

Pending requests you've sent that aren't accepted yet.

Rotate your share code, invalidating the previous one.

Unfriend someone (symmetric — removes the single friendship).

Report a user to the nofo team. Stored server-side for back-office triage; does not itself block (the app offers blocking alongside).

Redeem someone's code → send them a friend request (or, if they already requested you, become friends immediately).

Unblock a user you'd previously blocked. Does NOT restore a prior friendship — they have to re-add.

Ask for code -- used to login or signup...

Reply with received code

DeleteMe permanently deletes the calling user's account and everything tied to it: friends, friend requests, friend code, saved/going events, and chat history. Bearer-authed; the caller is taken from the token, never the body. Irreversible — afterward the phone number is free and the person can sign up again with a completely fresh account.

GetUser

UpdateMe edits the calling user's own profile. Bearer-authed; the caller is taken from the token, never the body.